Securytik Interactive Configuration Optimizer
Pick a scenario, answer a short wizard, and download a ready-to-import RouterOS script — built from templates validated on real hardware.
MikroTik and Cisco config wizards — plus a library of ready-to-run Ubuntu server commands. Nothing to install, nothing to connect.
Free with any SecuryTik account — no limits, no card. Offline by design: your credentials never leave your router. Import with /import.
No wizard, no sign-in. Copy a line, paste it into your router or server, and it runs. Every script is open source — read it before you run it.
Paste into a RouterOS terminal (Winbox / SSH).
A small-ISP edge: PPPoE subscribers and a captive-portal hotspot on one box.
A full example build — read it and adjust interfaces/addresses before importing on a live router.
/tool fetch url="https://raw.githubusercontent.com/mhdhaidarah/Mikrorik/main/Basic%20ISP%20PPPoE%20Hotspot" dst-path=sico.rsc mode=https; /import sico.rsc
Set up MikroTik User Manager as a RADIUS server for hotspot/PPPoE accounts.
A full example build — read it and adjust interfaces/addresses before importing on a live router.
/tool fetch url="https://raw.githubusercontent.com/mhdhaidarah/Mikrorik/main/User%20Manager%20Radius%20Setup" dst-path=sico.rsc mode=https; /import sico.rsc
Build per-app address lists from DNS so you can see and shape app and game traffic.
Redirects client DNS to the router and blocks DoT/DoH so the collector sees the queries. Back up first.
/tool fetch url="https://raw.githubusercontent.com/mhdhaidarah/Mikrorik/main/IP%20Collector%20DNS" dst-path=sico.rsc mode=https; /import sico.rsc
Paste into an Ubuntu shell. Each script calls sudo itself where it needs root.
Menu of every snippet below — pick one and it runs, exactly as if you had pasted it yourself. The first run installs itself as the permanent command “ubuntu-assistant” and copies every snippet (~520 KB of shell, no packages) onto the machine, so the menu and every local-configuration tool keep working with no network at all.
bash <(curl -fsSL https://sico.securytik.com/ubuntu)
One-shot support tunnel: lives in /tmp, dies on reboot, tears down with l2tp-once-down. Nothing persistent is written.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/l2tp-client-once.sh)
Reboot-persistent L2TP/IPsec client. Multiple VPNs side by side, optional IPsec, force-reconnect, auto-redial after a drop.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/l2tp-client.sh)
Run an LNS: add/remove users, see who is online, optional IPsec. Routes and NATs its clients to the internet.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/l2tp-server.sh)
Add/remove WireGuard tunnels, force-reconnect from the saved config, enable on boot.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/wireguard-client.sh)
Serve WireGuard peers: add/remove, print a peer's config + QR, see who is online. Routes and NATs its clients to the internet.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/wireguard-server.sh)
Pick an interface and set IPv4/IPv6 (DHCP / static / SLAAC) + DNS, with netplan-try safe-apply and backups.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/network-ip.sh)
Install and run an internet speed test; optionally bind it to a specific uplink.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/speedtest.sh)
Pick a timezone (Middle-East presets or custom IANA) and enable NTP.
bash <(curl -fsSL https://raw.githubusercontent.com/mhdhaidarah/Ubuntu-Essentials/main/time-date.sh)
New to RouterOS? Follow along with a free, hands-on video course — then generate the matching config here.
Nine MikroTik scenarios cover the common builds — plus a Custom path that exposes every option. Each asks only the questions it needs.
WAN uplink, bridged LAN, DHCP and masquerade. Online in minutes.
Multi-SSID Wi-Fi (wifi-qcom or legacy), each optionally on its own VLAN.
A vlan-filtering bridge, per-zone gateways and DHCP, Wi-Fi, firewall and QoS.
Your own PPPoE access concentrator with speed-limited profiles. No RADIUS.
Fan many PPPoE sessions over private macvlans on one or more interfaces — the macvlan + client snippet, generated.
Captive-portal hotspot with speed tiers, local accounts and themeable login pages.
PPPoE subscribers and a hotspot on one box — a full small-ISP edge.
Centrally manage many access points (wifiwave2 or legacy CAPsMAN).
Every option exposed: WANs, VLANs, PPPoE, hotspot, Wi-Fi, QoS, hardening.
The same wizard generates Cisco IOS configs — and an Ubuntu library hands you ready-to-run server commands.
Basic LAN, router-on-a-stick VLANs, a PPPoE concentrator with RADIUS, and L2 access/trunk switching — generated as ready-to-paste IOS config.
A library of ready-to-run snippets — netplan IP, PPPoE, WireGuard, SMB/SSHFS, Docker and more. Copy the command, or run it straight from the repo.
SICO shows you the full .rsc on the review screen. Every section is commented, every line tagged SICO: so you always know what it does and where it came from. Save up to 10 configs to your account and re-download any time.
Pick your MikroTik model and we know its ports — or enter the port counts manually.
WAN uplink, LAN, VLANs, Wi-Fi or PPPoE — only the questions your scenario needs, with sensible defaults.
See the exact RouterOS script before you commit. Every line is commented and tagged.
Download the .rsc and run /import on your router. That's it.
